CVE-2022-28738
09.05.2022, 18:15
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 3.0.0 ≤ 𝑥 < 3.0.4 |
| ruby-lang | ruby | 3.1.0 ≤ 𝑥 < 3.1.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| ruby |
| ||
| ruby-default-gems |
| ||
| ruby-devel |
| ||
| ruby-doc |
| ||
| ruby-libs |
| ||
| rubygem-bigdecimal |
| ||
| rubygem-bundler |
| ||
| rubygem-io-console |
| ||
| rubygem-irb |
| ||
| rubygem-json |
| ||
| rubygem-minitest |
| ||
| rubygem-power |
| ||
| rubygem-psych |
| ||
| rubygem-rake |
| ||
| rubygem-rbs |
| ||
| rubygem-rdoc |
| ||
| rubygem-rexml |
| ||
| rubygem-rss |
| ||
| rubygem-test-unit |
| ||
| rubygem-typeprof |
| ||
| rubygems |
| ||
| rubygems-devel |
|
Common Weakness Enumeration
References